- 03 Sep, 2015 23 commits
-
-
commit 9921bb9d2002e136c030ff337c14f8b7eab0fc72 Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Mon Aug 10 20:19:44 2015 +0530 Document --ssh-extra-args command-line option commit 8b25595e7b1cc3658803d0821fbf498c18ee608a Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Thu Aug 13 13:24:57 2015 +0530 Don't disable GSSAPI/Pubkey authentication when using --ask-pass This commit is based on a bug report and PR by kolbyjack (#6846) which was subsequently closed and rebased as #11690. The original problem was: «The password on the delegated host is different from the one I provided on the command line, so it had to use the pubkey, and the main host doesn't have a pubkey on it yet, so it had to use the password.» (This commit is revised and included here because #11690 would conflict with the changes in #11908 otherwise.) Closes #11690 commit 119d0323892c65e8169ae57e42bbe8e3517551a3 Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Thu Aug 13 11:16:42 2015 +0530 Be more explicit about why SSH arguments are added This adds vvvvv log messages that spell out in detail where each SSH command-line argument is obtained from. Unfortunately, we can't be sure if, say, self._play_context.remote_user is obtained from ANSIBLE_REMOTE_USER in the environment, remote_user in ansible.cfg, -u on the command line, or an ansible_ssh_user setting in the inventory or on a task or play. In some cases, e.g. timeout, we can't even be sure if it was set by the user or just a default. Nevertheless, on the theory that at five v's you can use all the hints available, I've mentioned the possible sources in the log messages. Note that this caveat applies only to the arguments that ssh.py adds by itself. In the case of ssh_args and ssh_extra_args, we know where they are from, and say so, though we can't say WHERE in the inventory they may be set (e.g. in host_vars or group_vars etc.). commit b605c285baf505f75f0b7d73cb76b00d4723d02e Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Tue Aug 11 15:19:43 2015 +0530 Add a FAQ entry about ansible_ssh_extra_args commit 49f8edd035cd28dd1cf8945f44ec3d55212910bd Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Mon Aug 10 20:48:50 2015 +0530 Allow ansible_ssh_args to be set as an inventory variable Before this change, ssh_args could be set only in the [ssh_connection] section of ansible.cfg, and was applied to all hosts. Now it's possible to set ansible_ssh_args as an inventory variable (directly, or through group_vars or host_vars) to selectively override the global setting. Note that the default ControlPath settings are applied only if ssh_args is not set, and this is true of ansible_ssh_args as well. So if you want to override ssh_args but continue to set ControlPath, you'll need to repeat the appropriate options when setting ansible_ssh_args. (If you only need to add options to the default ssh_args, you may be able to use the ansible_ssh_extra_args inventory variable instead.) commit 37c1a5b6794cee29a7809ad056a86365a2c0f886 Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Mon Aug 10 19:42:30 2015 +0530 Allow overriding ansible_ssh_extra_args on the command-line This patch makes it possible to do: ansible somehost -m setup \ --ssh-extra-args '-o ProxyCommand="ssh -W %h:%p -q user@bouncer.example.com"' This overrides the inventory setting, if any, of ansible_ssh_extra_args. Based on a patch originally by @Richard2ndQuadrant. commit b023ace8a8a7ce6800e29129a27ebe8bf6bd38e0 Author: Abhijit Menon-Sen <ams@2ndQuadrant.com> Date: Mon Aug 10 19:06:19 2015 +0530 Add an ansible_ssh_extra_args inventory variable This can be used to configure a per-host or per-group ProxyCommand to connect to hosts through a jumphost, e.g.: inventory: [gatewayed] foo ansible_ssh_host=192.0.2.1 group_vars/gatewayed.yml: ansible_ssh_extra_args: '-o ProxyCommand="ssh -W %h:%p -q bounceuser@gateway.example.com"' Note that this variable is used in addition to any ssh_args configured in the [ssh_connection] section of ansible.cfg (so you don't need to repeat the ControlPath settings in ansible_ssh_extra_args).
James Cammarata committed -
Fix typo to avoid traceback during testing
Toshio Kuratomi committed -
James Cammarata committed
-
* When iterating over a child state, a failure should be propagated up so parent blocks don't continue iterating * Make sure a child state exists before trying to search it Fixes #12210
James Cammarata committed -
Praveen Kumar committed
-
Python 3: avoid iteritems() in a template
Toshio Kuratomi committed -
I don't think six.iteritems is available here, but I also don't expect there to be enough platforms to ever make the speed difference between .items() and .iteritems() noticeable.
Marius Gedminas committed -
Toshio Kuratomi committed
-
Toshio Kuratomi committed
-
Toshio Kuratomi committed
-
Simplify FactCache.copy()
Toshio Kuratomi committed -
Also fix the bug (missing from six import iteritems) I introduced in 823677b4.
Marius Gedminas committed -
Replace .iteritems() with six.iteritems()
Toshio Kuratomi committed -
Replace .iteritems() with six.iteritems() everywhere except in module_utils (because there's no 'six' on the remote host). And except in lib/ansible/galaxy/data/metadata_template.j2, because I'm not sure six is available there.
Marius Gedminas committed -
James Cammarata committed
-
James Cammarata committed
-
James Cammarata committed
-
James Cammarata committed
-
https://github.com/amenonsen/ansible
Merge branch 'connection-locking' of https://github.com/amenonsen/ansible into amenonsen-connection-locking
James Cammarata committed -
Make lock_host_keys a real noop, instead of half-a-noop
James Cammarata committed -
Abhijit Menon-Sen committed
-
The lock file is (a temporary file) opened in the parent process, whose open fd is inherited by the workers after fork, and passed down through the PlayContext. Connection grows lock/unlock methods which can be used by individual connection plugins.
Abhijit Menon-Sen committed -
Right now, we don't do any locking, but we still scan known_hosts files twice per connection. That's completely unnecessary, and the proposed solutions to the locking problem wouldn't need known_hosts scanning anyway, so this code can go away.
Abhijit Menon-Sen committed
-
- 02 Sep, 2015 17 commits
-
-
Delete all compiled python files when running hacking/env-setup
Brian Coca committed -
Luke Rohde committed
-
Brian Coca committed
-
Brian Coca committed
-
Toshio Kuratomi committed
-
In v1, a trailing newline was kept if the parameter was passed as key=value. If the parameter was passed as yaml dict the trailing newline was discarded. Since key-value and yaml dict were unified in v2 we have to make a choice as to which behaviour we want. Decided that keeping trailing newlines by default made the most sense. Fixes #12200 Fixes #12199
Toshio Kuratomi committed -
Luke Rohde committed
-
James Cammarata committed
-
Toshio Kuratomi committed
-
Use rich comparisons for Attribute and FieldAttribute
James Cammarata committed -
Fixes #12206
James Cammarata committed -
ansible is passing unicode arond internally so we should test the same data. * Add a zero length test for _count_newlines and fix the zero newlines test to have no newlines.
Toshio Kuratomi committed -
Toshio Kuratomi committed
-
Fix for one half of hte bug reported in #12198
Toshio Kuratomi committed -
Brian Coca committed
-
Brian Coca committed
-
Brian Coca committed
-